The solution is primarily used for firewall management. It is required for clients who want to manage a large number of firewalls in multiple locations. Otherwise, it is not too useful. It makes sense to use the product when the clients want to manage several branches.
Palo Alto Networks Panorama
Palo Alto NetworksExternal reviews
External reviews are not included in the AWS star rating for the product.
Enables organizations to easily manage a large number of firewalls in multiple locations through a centralized management console
What is our primary use case?
What is most valuable?
Managing the firewalls in the branch locations from a central management console is easier. We can schedule tasks like firmware updates and send rules or policies to all the firewalls in a single stretch. Palo Alto is one of the best firewalls we can have in our environment. It has one of the best back-end databases for signatures and behavior-based analysis. Recently, the vendors integrated it with a lot of AI for threat prevention. Palo Alto is a leader in the market.
What needs improvement?
If we implement Cisco or Fortinet's firewall for the first time, anybody with a basic knowledge of firewalls can set the policies and rules. The implementation is not that easy. Though Palo Alto is much better and more efficient than many other products in the market, we need some skilled resources to manage the initial installation and configuration. It leads to an increase in service costs.
What do I think about the stability of the solution?
The tool is relatively stable. It has a good security portfolio in the market.
How are customer service and support?
The support charges are pretty high. The subscription renewals are relatively much higher than those of the peers. However, the vendor is working on the pricing. They are also getting competitive because Fortinet is taking over many Palo Alto clients due to the cost.
How was the initial setup?
Initial implementation is challenging to an extent. The setup takes time. Once it is implemented, then it's very straightforward. Once the person managing the setup gets a good experience with the product, it's pretty easy to manage and relatively smooth.
What was our ROI?
The high price gets compensated with the piece of mind of having Palo Alto in the environment.
What's my experience with pricing, setup cost, and licensing?
Palo Alto is costly compared to Fortinet and Sophos. However, the vendor is working on cost-effective models. They are working on the back end to make it more attractive for SMBs.
Which other solutions did I evaluate?
Palo Alto and Check Point are the top products in the market. Fortinet and Cisco also have some good solutions.
What other advice do I have?
Palo Alto has one of the best portfolios in the market if we need a very stable environment to manage the information security space for our organization or our client's organization in firewalling, application-level firewalling, and contextual-based firewalling. We can also look at Check Point as an option.
The vendor has AI incorporated into their new offerings. Generally, behavior analysis has to be more automated rather than manual. With AI incorporated, the back-end OS can understand and easily detect certain vectors, like the zero-day attack. It's in a very early stage. It'll take quite some time for Palo Alto to scale AI to the level where the entire thing can be automated.
Overall, I rate the solution an eight out of ten.
Best threat centric approach for Cyber Defense Teams
Customer Support
Ease of Integration
Simplifies firewall management and integrates seamlessly with Palo Alto firewalls
What is our primary use case?
My clients use Palo Alto Networks Panorama for centralized management of multiple firewalls across various locations. It allows them to easily oversee and configure all their firewalls through a single interface, streamlining security management across their network infrastructure.
What is most valuable?
The most valuable aspect of Palo Alto Networks Panorama for me is the centralized management of multiple firewalls. It saves time, provides consolidated visibility into my network, and allows me to configure all firewalls from one web interface, eliminating the need to access each firewall separately.
What needs improvement?
In the future, it would be beneficial if Panorama could include a firewall assurance feature similar to Skybox. While each firewall has its policy optimizer, a consolidated policy optimizer in Panorama could further enhance firewall management and optimization.
For how long have I used the solution?
I have been working with Palo Alto Networks Panorama for over ten years.
What do I think about the stability of the solution?
Panorama is stable.
What do I think about the scalability of the solution?
Palo Alto Networks Panorama is scalable and can support up to 1,000 devices, making it suitable for various network sizes. In terms of clients, it is mainly used by larger customers with more than ten firewalls. Some smaller customers with six or eight firewalls may not opt for Panorama, but those with ten or more find it beneficial for centralized management.
How are customer service and support?
I find Palo Alto Networks' technical support to be good, especially with premium support. The initial support level is handled by us, and if we encounter issues beyond our scope, Palo Alto's support team is efficient in resolving them. I would rate the support as a nine out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
Installing Palo Alto Networks Panorama is easy, and connecting firewalls is a straightforward process. Deployment typically requires just one person, usually the firewall administrator. Maintenance is also easy, especially for those familiar with managing individual firewalls, and Panorama serves additional functions like log collection and setting up SD-WAN functionality, making it highly useful for networks with multiple firewalls.
What was our ROI?
In terms of return on investment, Palo Alto Networks Panorama is worthwhile, especially for larger networks with more than ten firewalls. The time saved and the consolidated view it provides investment pay off quickly, often within a couple of months.
What's my experience with pricing, setup cost, and licensing?
In terms of pricing, Palo Alto Networks Panorama is moderate. It is very affordable when compared to more expensive firewalls. The license is yearly, and the price typically includes the initial license and support, with subsequent years requiring only twenty percent of the initial license cost for support. It is negotiable, and the overall cost depends on your network setup and the type of firewalls you are using.
What other advice do I have?
Overall, I would rate Palo Alto Networks Panorama as an eight out of ten.
SASE with user+ network level security
Easy to use
Centralized management of Palo Alto NGFW
Efficient firewall management with a user-friendly interface
What is our primary use case?
It works as a centralized management solution for Palo Alto Networks firewalls. It allows administrators to manage all firewalls from a single interface, reducing the time and effort required for configuration. Panorama also provides pre-configurations and allows for easy deployment of configuration rules to multiple firewalls. Administrators can also leverage Panorama to change smart IPS rules to Panorama IPS rules, allowing for customization and flexibility in managing security signatures. It also simplifies the process of performing upgrades and complex tasks, making it a valuable tool for efficient firewall management.
What needs improvement?
If a large company uses Panorama as a log collector, it may require setting up multiple local collector devices due to potential limitations in handling firewall logs. It would be beneficial to improve the capabilities of Panorama to handle logs more efficiently, potentially reducing the need for additional local collectors. Adding more predefined dashboards as features would enhance the monitoring and reporting capabilities. The iOPS tools, which are currently offered separately, could be integrated into Panorama to eliminate the need for an additional dashboard or GUI.
For how long have I used the solution?
I have been working with it for nearly four years.
What do I think about the stability of the solution?
It is a stable and reliable solution.
How are customer service and support?
They offer two types of support: Partner Enabled Support and Premium Support. With Partner Enabled Support, partners can open cases with distributors who then relay them to Palo Alto. This process can be time-consuming, leading to customer dissatisfaction. Premium Support allows customers to directly open cases with Palo Alto, bypassing the distributor, but it comes at a higher cost. The majority of high-level clients opt for Partner Enabled Support, despite its drawbacks.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Among the various high-level firewalls that we previously used, including Check Point and Cisco, Palo Alto Networks Panorama stands out for its stability and ease of configuration. It provides a user-friendly interface that simplifies the process of managing firewall rules.
How was the initial setup?
Configuring firewall rules is generally straightforward and user-friendly. Certain advanced tasks, such as setting up local collectors and changing log types or indexing can be challenging for end-users. In such cases, assistance from partner companies or Palo Alto Support may be required.
What's my experience with pricing, setup cost, and licensing?
Palo Alto products are generally priced higher compared to their competitors. Its higher price is justified by the reliability, scalability, and extensive feature set that is offered.
What other advice do I have?
The suitability of Palo Alto products and their pricing depends on the size and the requirements of the company. It would not be a good fit for smaller companies with a limited number of firewalls. For larger companies with multiple clusters or complex configurations, Palo Alto products are highly recommended due to their comprehensive range of features and capabilities. I would rate it nine out of ten.